Security Directory

H

hobbytec.se

hobbytec.se

46

The website hobbytec.se currently serves as a parked domain with minimal content primarily consisting of advertising blocks and no substantive business information or services. The domain registration data is inconsistent, showing a creation date in the future, which undermines trust and suggests the domain is not yet actively used for a legitimate business. Technically, the site uses basic HTML, CSS, and JavaScript with Google Adsense and Bodis scripts for monetization. Security posture is weak with no DNSSEC, no security headers, and no visible privacy or incident response policies. The site is accessible over HTTPS but lacks GDPR compliance mechanisms such as cookie consent banners. Overall, the site appears to be a placeholder rather than an operational business website.

H

Hobbytec

hobby-tec.de

56

Hobbytec is a medium-sized manufacturer specializing in aluminum garden structures such as winter gardens, pergolas, carports, and photovoltaic solutions. The company operates primarily in Germany with a strong presence across several European countries through partner sites. Their business model focuses on custom-made, turnkey solutions including transport and installation services. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site uses modern web technologies including jQuery, Google Tag Manager, and Google reCAPTCHA to enhance user experience and security. Hosting appears to be managed through Czech providers, consistent with the company's regional footprint. Security posture is solid with HTTPS and spam protection on forms, though some security headers and policies are missing. Privacy compliance is well addressed with GDPR-consent mechanisms and a privacy policy. Overall, the site is trustworthy and safe for general audiences.

H

Hobbytec

hobbytec.bg

45

Hobbytec is a medium-sized manufacturer specializing in aluminum winter gardens, pergolas, carports, modular houses, and photovoltaic solutions. The company operates multiple country-specific websites and showrooms, positioning itself as a leading player in the European home and garden equipment market. Their business model focuses on custom production and direct sales supported by physical showrooms and an online presence. Technically, the website employs modern web technologies including jQuery, Google Tag Manager, and reCAPTCHA, with a custom CMS platform. The site is well-optimized for SEO and mobile devices, though accessibility features are basic. Security posture is solid with HTTPS and form protections, but lacks advanced security headers and incident response disclosures. Overall, the website is professional, trustworthy, and compliant with GDPR, featuring clear contact information and cookie consent mechanisms.

C

Cardberg, s.r.o.

cardberg.com

41

Cardberg, s.r.o. operates the Cardberg Tourist Insights platform, providing comprehensive IT solutions for tourism destinations and boards. Their services include tourist discount and loyalty card management, mobile applications, online shops, hotel reception integration, and advanced data analytics for marketing and tourist behavior insights. The company has over 10 years of experience and serves multiple tourism destinations, positioning itself as a specialized technology provider in the tourism sector. Technically, the website uses a modern but somewhat dated tech stack including Bootstrap and jQuery, with integrations for analytics and session recording. Security posture is moderate with HTTPS enforced and CAPTCHA on contact forms, but lacks published privacy and cookie policies and security headers. The domain registration is consistent and mature, supporting business legitimacy. Overall, the website is professional and functional but could improve compliance and security transparency.

T

TT HOLDING, a.s.

ttholding.cz

45

TT HOLDING, a.s. is a Czech-based company specializing in the sale and distribution of windows, doors, and related accessories. Founded in 2011, the company has expanded its operations across multiple European countries including Slovakia, Austria, Germany, and Hungary. It operates several e-commerce platforms targeting both B2B and B2C customers such as craftsmen, construction companies, developers, and individual consumers. The company emphasizes quick delivery, multilingual support, and a large inventory of stocked products alongside custom-made solutions. Technically, the website employs modern web technologies including Google Tag Manager and Google Analytics for tracking, uses HTTPS with a good SSL configuration, and implements reCAPTCHA for form security. The site is mobile-optimized with good navigation and content quality. However, it lacks explicit privacy and cookie policies and does not implement common security headers, which are areas for improvement. From a security perspective, the site shows a mature posture with encrypted communications and secure forms but could enhance its defenses by adding security headers and publishing incident response policies. The absence of WHOIS data due to privacy protection does not raise immediate concerns given the professional presentation and business maturity. Overall, the website is trustworthy and well-positioned in its market segment. Strategically, TT HOLDING should focus on improving privacy compliance and security transparency to strengthen customer trust and regulatory adherence. Enhancing technical SEO and accessibility could further improve user experience and market reach.

VELUXshop.hu is the official Hungarian e-commerce platform for VELUX shading products and accessories, offering a comprehensive catalog of roof window shading solutions with promotions and warranty services. The website targets Hungarian homeowners and consumers seeking quality VELUX products, leveraging a modern Nuxt.js and Vue.js technology stack. The site demonstrates good digital maturity with secure HTTPS, clear navigation, and mobile optimization. Security posture is strong with appropriate headers and no visible vulnerabilities, though cookie consent mechanisms and explicit security policies could be enhanced. Overall, the site reflects a trustworthy and professional brand presence aligned with VELUX Group standards.

H

heyData - Compliance leicht gemacht, für alle

heydata.eu

53

heyData.eu is a German-language website focused on providing compliance solutions, likely in the data protection and privacy domain. The website appears to target businesses seeking simplified compliance management services. The technical infrastructure is based on modern web standards using Bootstrap 5 and custom fonts, hosted via GoDaddy. However, the site lacks visible privacy, cookie, or terms of service policies, and no explicit contact information or social media links are present in the analyzed HTML snippet. Security posture is minimal with no detected security headers or incident response contacts. Overall, the site is accessible and functional but requires improvements in privacy compliance and security transparency to enhance trust and regulatory adherence.

R

RustyBrick, Inc.

rustybrick.com

60

RustyBrick, Inc. is a small technology service company based in New York, specializing in web design, web development, mobile app development, branding, and marketing technology solutions. The company has a professional online presence with a comprehensive portfolio showcasing various projects and client testimonials, positioning itself as an established player in the technology services market. Their target audience primarily consists of businesses seeking customized online technology solutions to improve operational efficiency and sales. The website infrastructure employs modern web technologies including HTML5, CSS3, JavaScript, and integrates Google services such as reCAPTCHA for form security and Google Analytics for user tracking. The site is mobile optimized with responsive design elements, providing a good user experience across devices. However, some accessibility features could be improved to meet higher compliance standards. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to protect forms from spam and abuse. Despite this, the absence of key security headers and lack of a published security policy or incident response contact reduces the overall security maturity. The missing WHOIS registration data raises concerns about domain legitimacy, although the professional content and active business presence mitigate some risk. Overall, RustyBrick's website is well-designed and functional with moderate technical sophistication and a good security baseline. The primary risks relate to domain registration transparency and privacy compliance, which should be addressed to enhance trust and regulatory adherence.

T

The Architectural Review Store

thearchitecturalreviewstore.com

70

The Architectural Review Store is an e-commerce platform specializing in the sale of back issues and magazines related to architecture. The website targets architects, designers, and enthusiasts interested in architectural publications. It operates on the Shopify platform, leveraging its robust e-commerce infrastructure and CDN hosting. The site demonstrates a professional design with good content quality and consistent branding. Privacy and cookie policies are implemented with GDPR compliance, and tracking is conducted via Facebook Pixel and Google Analytics. However, the absence of WHOIS registration data and explicit contact information slightly detracts from its business credibility. The site is fully accessible without any WAF or blocking mechanisms, and it maintains excellent SSL security through Shopify's infrastructure.

M

MOL Plugee

molplugee.cz

36

MOL Plugee operates as a provider of electric vehicle charging stations primarily in the Czech Republic, offering both DC and AC chargers capable of fast charging within 30 minutes. The company appears to be a medium-sized entity founded in 2018, likely affiliated with the MOL Group, focusing on the energy and transportation sectors. Their market position is localized with a clear target audience of electric vehicle users in the region. Technically, the website employs modern web technologies including Bootstrap, FontAwesome, and Cookiebot for cookie consent management, hosted on Microsoft Azure DNS infrastructure. The site is mobile-optimized and SEO-friendly with good content quality and consistent branding. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers are not visible in the HTML content. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a comprehensive privacy policy linked and a detailed cookie consent mechanism in place. However, contact information and terms of service are not explicitly found on the main page, which could be improved for better business credibility. Overall, the website is professional, trustworthy, and safe for general audiences.

I

INA-INDUSTRIJA NAFTE, d.d.

inaloyaltynagradna.com

59

The website inaloyaltynagradna.com serves as a promotional platform for the INA Loyalty program's Coca-Cola related contest running from June 6 to July 31, 2025. It targets Croatian consumers who purchase Coca-Cola products at INA gas stations, encouraging them to participate in a loyalty program to win prizes such as PlayStation 5 Pro, iPhone 16, and fuel cards. The site is well-branded with consistent INA and Coca-Cola imagery and provides clear instructions and contact information. The business behind the site is INA-INDUSTRIJA NAFTE, a large energy sector company in Croatia, leveraging digital engagement to enhance customer loyalty.

E

Elite | Monday Lovers

esx.sk

40

Elite | Monday Lovers is a Slovak full-service advertising agency with approximately 15 years of experience, specializing in strategy, identity, campaigns, print, web design, social media, mobile applications, and PR. The company targets businesses seeking comprehensive marketing and advertising solutions and maintains a strong portfolio of multinational and local clients. Their website reflects a professional and consistent brand image with a clear presentation of services and client references. Technically, the site is built on OctoberCMS, uses modern web technologies, and integrates Google Tag Manager and Google Maps API for analytics and location services. The site is mobile optimized and performs moderately well. Security-wise, the website enforces HTTPS, implements a cookie consent mechanism with granular options, and includes basic security headers, though it lacks advanced headers like CSP or HSTS. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is supported by a cookie policy page with GDPR considerations, but a dedicated privacy policy and terms of service pages are not clearly found. Contact information is comprehensive and includes multiple channels. Overall, the site is trustworthy and professional with room for security and compliance improvements.

S

Statutární město Jihlava

jihlava-city.cz

49

The website jihlava-city.cz serves as the official digital presence of the statutory city of Jihlava in the Czech Republic. It provides comprehensive municipal information, including city news, public documents, event calendars, citizen services, and tourism resources. The site targets residents, local businesses, and visitors, positioning itself as the authoritative source for city-related information and services. The business model is that of a government municipal portal, focusing on transparency, public engagement, and service delivery. Technically, the website is built on the VISMO CMS platform, utilizing standard web technologies such as HTML5, CSS, and JavaScript. It integrates Google services for translation and search functionality, enhancing accessibility and user experience. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. Hosting and domain registration are consistent with Czech providers, supporting the site's legitimacy. From a security perspective, the site enforces HTTPS and employs a cookie consent mechanism compliant with GDPR. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. Security headers appear to be missing or not explicitly declared in the provided data, representing an area for improvement. Overall, jihlava-city.cz is a trustworthy and professional municipal website with strong content quality and privacy compliance. Strategic recommendations include implementing security headers, publishing a security policy, and establishing a vulnerability disclosure process to enhance security posture and user trust.

M

město Litvínov se sídlem Městský úřad Litvínov

mulitvinov.cz

47

The website mulitvinov.cz serves as the official online presence of the city of Litvínov, Czech Republic. It provides comprehensive information and services related to municipal administration, public services, local governance, and community events. The site targets residents and visitors seeking official information about the city, including administrative procedures, social services, cultural activities, and local news. The business model is that of a government entity focused on public service delivery and citizen engagement. The website is well-established, with a domain age dating back to 1999, reflecting a mature digital presence for the municipality. Technically, the site employs a modern CMS platform (vismo), uses HTTPS with good SSL configuration, and integrates third-party services such as Google reCAPTCHA for form security, Google Translate for multilingual support, and Facebook SDK for social media integration. The site demonstrates good mobile optimization, accessibility, and SEO practices, although some improvements in security headers and cookie consent mechanisms are recommended. From a security perspective, the website enforces HTTPS and uses CAPTCHA to protect forms, but lacks explicit security headers and detailed security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the content. Privacy compliance is basic, with privacy and cookie policies present but without active consent mechanisms. The domain registration data is consistent and trustworthy, supporting the legitimacy of the site. Overall, the website presents a low-risk profile with good business credibility and technical implementation. Strategic recommendations include enhancing security headers, implementing cookie consent mechanisms, and publishing explicit security and incident response policies to improve compliance and trust.

M

Magistrát města Mostu

mesto-most.cz

49

The website www.mesto-most.cz serves as the official online portal for the city of Most in the Czech Republic. It provides comprehensive municipal information, including administrative services, event calendars, news updates, and public resources tailored for residents and visitors. The site is well-branded with official city logos and integrates social media channels to enhance community engagement. Technically, the site uses a modern CMS (vismo), incorporates Google Analytics for traffic insights, and employs Google reCAPTCHA to secure forms against spam. The presence of cookie consent and privacy policies indicates compliance with GDPR regulations. Security-wise, the site enforces HTTPS and uses standard security practices but lacks explicit security headers and a published security policy or incident response contact. The WHOIS data is unavailable, which slightly reduces domain registration trust but does not detract from the site's legitimacy given its official nature. Overall, the site is professional, user-friendly, and secure with room for improvement in security transparency and technical headers.

I

ipartner

ipartner.sk

48

ipartner is a Slovak-based company specializing in creating exceptional products and services through creative design and technology. Their offerings include web design, software development, marketing, SEO, and graphic design, targeting both companies and individuals across various industries. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the site uses modern JavaScript libraries, Google Analytics for tracking, and is hosted on a Slovak hosting provider, ensuring moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and GDPR-compliant privacy and cookie policies, though explicit security policies and incident response information are absent. Overall, the domain registration data aligns well with the business history, supporting legitimacy and trustworthiness.

S

Smash, s. r. o.

hellosmash.sk

47

Smash, s. r. o. is a Slovak-based small web development agency specializing in creating high-quality custom websites and digital products. Their market position is focused on delivering precision and quality to local businesses and organizations, with a portfolio that includes notable clients such as ESET. The company emphasizes mobile-first design and user experience. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with integration of Google Analytics and Tag Manager for performance and marketing insights. The site is well-structured, mobile-optimized, and SEO-friendly, though accessibility features are basic. Security posture is moderate; HTTPS is assumed but security headers are not evident, and no explicit security policies or incident response information are published. Privacy compliance is good with GDPR and cookie consent mechanisms in place. Overall, the website is professional and trustworthy, though WHOIS data is unavailable due to privacy protection, which slightly reduces transparency.

V

VELUX Magyarország Kft.

velux.hu

66

VELUX Magyarország Kft. operates as a leading manufacturer and retailer of roof windows, skylights, sun tunnels, and shading solutions in Hungary. The company is part of the global VELUX Group, established in 1941, and holds a strong market position as a trusted brand for home improvement products. Their website offers comprehensive product information, consultation services, and supports both consumers and professionals with dedicated resources. Technically, the website is built on modern frameworks like Vue.js and Sitecore CMS, integrating advanced search and analytics tools, ensuring a responsive and user-friendly experience across devices. Security posture is robust with HTTPS enforcement and no visible vulnerabilities, complemented by comprehensive privacy and legal documentation, including GDPR compliance and a whistleblower reporting channel. Overall, the site reflects a mature digital presence with high professionalism, trustworthiness, and alignment with business goals.

V

VELUX

velux.hr

58

VELUX is a leading global manufacturer specializing in roof windows, flat roof windows, light tunnels, blinds, and external shutters. The company has a strong market position with a comprehensive product portfolio and professional services aimed at homeowners, architects, and construction professionals. The website is well-structured, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, the site uses modern frameworks such as Vue.js and Sitecore CMS, with integrations like Google Tag Manager and Algolia for search functionality. Security posture is strong with HTTPS enforcement and standard security headers, though there is room for improvement in explicit cookie consent and security policy disclosures. Overall, the domain registration and WHOIS data align well with the brand's identity, supporting legitimacy and trustworthiness.

I

Internetový prodej s.r.o., Shean s.r.o.

ahifi.cz

42

Ahifi.cz is a Czech-based e-commerce business specializing in car audio equipment and accessories, including autoradios, speakers, amplifiers, subwoofers, and soundproofing materials. The company operates a multilingual website targeting Central European markets and offers additional services such as installation and wholesale distribution. The website demonstrates a mature digital presence with a professional design, clear navigation, and comprehensive product information. Technically, the site uses modern JavaScript libraries, Google Tag Manager, and tracking tools, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforcement and secure login mechanisms, though some security headers could be improved. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. However, the absence of WHOIS data reduces domain trustworthiness, warranting further verification. Overall, Ahifi.cz presents as a credible and professional business with a good balance of content quality, technical implementation, and security awareness.

TÜV Saarland Immobilienbewertung GmbH is a specialized real estate valuation service provider established in 2001, offering comprehensive services including property valuations, inspections, data procurement, and due diligence primarily targeting private and commercial clients as well as financial institutions. The company leverages the trusted TÜV Saarland brand to position itself as a reliable and professional partner in the German real estate market. Technically, the website is built on a modern stack including Bootstrap 3 and jQuery, with Cookiebot implemented for GDPR-compliant cookie management. The presence of an admin login form on the homepage suggests a need for enhanced security controls. Security posture is moderate with HTTPS implied but lacking visible security headers and explicit security policies. Privacy compliance is strong with clear cookie consent mechanisms and a privacy policy in German. Overall, the site is professional, accessible, and trustworthy with room for security improvements.

The website dsoft.company is a minimal WordPress-based blog with very limited content and no clear business description or services. It appears to be a personal or small-scale site with a single blog post and basic navigation. The technical infrastructure is standard for WordPress, hosted by BigRock Solutions Ltd, with HTTPS enabled but lacking advanced security headers or DNSSEC. There are no privacy, cookie, or terms of service policies present, and no contact or business information is provided, which limits trust and compliance. The WHOIS data shows the domain was registered in 2022 in the United Arab Emirates with no organization name, which aligns with the minimal business presence on the site. Overall, the site has a low security posture and limited business credibility.

R

Rload

rload.es

43

Rload is a small digital creative agency based in Madrid, Spain, specializing in web design, ecommerce stores, app development, and user experience (UX) design. The company targets businesses and individuals seeking professional digital creative services locally. The website presents a professional image with good content quality and consistent branding, supported by structured data confirming business contact details and operating hours. Technically, the site uses modern web technologies including HTML5, CSS3, JavaScript, jQuery, and integrates Google Analytics and Google Tag Manager for visitor tracking. Performance and mobile optimization are adequate, though accessibility and SEO optimizations are basic. Security posture is moderate but lacks visible security headers and explicit policies. WHOIS data is inaccessible due to Red.es restrictions, limiting domain trust assessment. No privacy or cookie policies were found, indicating compliance gaps. Overall, the site is functional and professional but would benefit from enhanced security and privacy transparency.

C

CondorNet, s.r.o.

condornet.sk

46

CondorNet, s.r.o. is a Slovak telecommunications company specializing in high-speed optical and radio internet connections and television services primarily serving the Prešov region. The company positions itself as a reliable and longstanding local ISP with a focus on both residential and business customers. Their website reflects a professional and consistent brand image with clear service offerings and customer engagement channels. Technically, the website employs modern web technologies including Google Analytics and Tag Manager for tracking, with a responsive design and good SEO practices. Security-wise, the site uses HTTPS and implements cookie consent with IP anonymization for analytics, but lacks explicit security policies or incident response information. Overall, the site is trustworthy and compliant with GDPR, though improvements in security transparency and headers could enhance their posture.

M

Mishcon de Reya LLP

mdr.london

60

Mishcon de Reya LLP is a well-established independent law firm founded in 1973, with a significant international presence including offices in London and Singapore. The firm offers a broad range of legal and non-legal services across multiple sectors such as corporate law, dispute resolution, employment, innovation, and private client services. Their market position is strong, supported by a large team of over 1400 people and multiple subsidiaries and partner firms. The website reflects a professional and comprehensive digital presence with clear navigation and detailed service offerings. Technically, the website is built on ASP.NET Web Forms with modern web standards including responsive design, accessibility features, and SEO best practices. The site performance is moderate with good mobile optimization. Security measures include HTTPS enforcement and multiple security headers, indicating a mature security posture. However, explicit security policies and incident response information are not published, which could be improved. The overall risk profile is low with no detected vulnerabilities or suspicious content. The missing WHOIS data is a concern for domain registration transparency but does not detract significantly from the firm's credibility given the strong branding and external references. Strategic recommendations include publishing detailed security and incident response policies, adding vulnerability disclosure mechanisms, and verifying domain registration details to enhance trust.

C

Capptain bv

capptain.be

59

Capptain bv is a Belgian digital solutions partner specializing in accelerating business growth through process automation and custom digital solutions. Founded in 2014 as Fluvio, the company has evolved into a full-service digital agency offering web, app, and software development services. Their market position is that of a trusted technology partner for businesses seeking modern and professional digital transformation. The website demonstrates a strong focus on client engagement, showcasing case studies and leveraging modern technologies such as Laravel, Vue JS, and PHP. The technical infrastructure is modern and well-optimized for performance and mobile responsiveness, indicating a mature digital presence. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms. Overall, the business credibility is high, supported by transparent contact information, legal disclosures, and active social media channels.

D

Dopravní podnik města Jihlavy, a.s.

dpmj.cz

45

Dopravní podnik města Jihlavy, a.s. operates as the primary public transportation provider in Jihlava, Czech Republic, offering bus and trolleybus services along with related offerings such as ticket sales, vehicle maintenance, and advertising opportunities. The company maintains a professional web presence with clear navigation and relevant content targeting local residents and visitors. The website is built on the vismo CMS platform and incorporates modern web technologies including responsive design and accessibility features. Security posture is moderate with HTTPS implied but lacks explicit security headers and incident response information. Privacy policies are present and GDPR compliance appears addressed, though cookie consent mechanisms could be improved. The absence of WHOIS data limits domain trust assessment, but the business appears legitimate based on content and contact information. Overall, the website demonstrates a solid digital infrastructure suitable for its public service role.

D

Dopravní podnik města Ústí nad Labem a.s.

dpmul.cz

58

Dopravní podnik města Ústí nad Labem a.s. is a medium-sized public transportation company operating bus and trolleybus services primarily in the Ústí nad Labem region of the Czech Republic. The company provides a range of services including ticket sales, electronic tickets, contracted transport, and additional offerings such as a cable railway and driving school. The website reflects a well-established operator with a domain registered since 1999, consistent with the company's history and market presence. Technically, the website employs modern web technologies including Bootstrap for responsive design, JavaScript libraries for interactive elements, and Leaflet for mapping services. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. Hosting and domain registration are managed by a reputable Czech registrar, REG-ZONER. From a security perspective, the site uses HTTPS and implements cookie consent with Cloudflare Turnstile captcha for form protection. However, explicit security headers are not clearly declared, and there is no visible security policy or incident response contact information. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, with clear contact information and active social media channels. Strategic improvements could include publishing a formal security policy, enhancing security headers, and providing incident response contacts to strengthen security posture and user trust.

The analyzed content corresponds to a Chrome internal error page (chrome-error://chromewebdata/) which is displayed when the browser cannot load external website content. This page includes embedded JavaScript and styles for the Chrome offline dinosaur game but contains no actual business or website content. Consequently, no business information, privacy policies, or contact details are present. The technical infrastructure is limited to browser internal scripts and canvas-based game rendering. Security posture cannot be fully assessed due to the absence of a real website context. Overall, this is not a publicly accessible website but a browser error page, and thus lacks typical web presence elements.

O

Observatoř Kleť

komety.cz

42

KOMETY.CZ is an educational and scientific website operated by the Kleť Observatory in the Czech Republic, focusing on comet observations and related astronomical phenomena. The site provides a rich archive of articles authored primarily by astronomers Miloš Tichý and Jana Tichá, targeting astronomy enthusiasts and the general public interested in space science. The business model is informational, supported by the observatory's institutional backing, with no evident commercial activities. Technically, the website uses standard web technologies including HTML5, CSS, JavaScript, and Google Fonts, with moderate mobile optimization and basic SEO practices. Security posture is adequate with HTTPS usage and no visible vulnerabilities, but lacks advanced security headers and explicit privacy or cookie policies. The absence of contact information and privacy compliance details are notable gaps. Overall, the site is legitimate and trustworthy, supported by its affiliation with a recognized scientific institution, but could improve in privacy transparency and security best practices.

O

Observatoř Kleť

planetky.cz

41

PLANETKY.CZ is an astronomy-focused informational website operated by the Kleť Observatory in the Czech Republic. It provides articles and news about asteroids, comets, and space missions, targeting astronomy enthusiasts and the general public interested in near-Earth objects. The website content is credible and consistent with a scientific observatory's mission, though it lacks modern web features such as privacy policies and contact information. Technically, the site uses basic web technologies including HTML5, CSS, and Google Fonts, with some external tracking scripts. Security posture is weak due to missing HTTPS verification and security headers, and no privacy or cookie policies are present, indicating low privacy compliance. WHOIS data is unavailable, which raises some concerns about domain registration transparency, but the site's content and affiliation with a known observatory support its legitimacy. Overall, the site is functional and informative but would benefit from improved security and compliance measures.

S

Smarty.cz

smarty.cz

54

Smarty.cz is a prominent Czech retailer specializing in smart electronics, gaming products, and accessories. The company operates both an e-commerce platform and multiple physical stores across the Czech Republic, offering services such as device servicing, buyback, and express delivery. Their market position is strong within the Czech retail sector for technology and gaming products, targeting consumers interested in the latest electronics and gaming gear. The website is professionally designed, mobile-optimized, and provides a rich user experience with clear navigation and comprehensive product offerings. Technically, Smarty.cz employs modern web technologies including HTML5, CSS3, JavaScript, and utilizes third-party services like Google Tag Manager and Startquestion widgets for analytics and customer engagement. The site demonstrates good performance and accessibility standards, with secure HTTPS connections and appropriate security headers in place. From a security perspective, the website shows a solid posture with HTTPS enforcement and secure form handling. However, there is a lack of publicly available security policies, incident response information, and vulnerability disclosure programs, which are areas for improvement. The absence of WHOIS data reduces transparency and slightly impacts trustworthiness, though the business presence and content quality support legitimacy. Overall, Smarty.cz presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include enhancing transparency around security policies, publishing incident response and vulnerability disclosure information, and improving WHOIS data availability to bolster trust and compliance.

ShareDefender.com is a newly established digital security service provider focused on protecting sensitive data and systems, particularly in the cryptocurrency sector. The website presents a basic informational page describing their customizable security license and proactive defense technologies. The business targets both individuals and companies seeking enhanced digital asset protection. Technically, the site is built using a simple hosting page builder with standard HTML and CSS, hosted by Infomaniak Network SA. There is no evidence of advanced frameworks or CMS platforms. Security posture is minimal with no DNSSEC, no security headers, and no visible HTTPS enforcement details. Privacy and cookie policies are absent, and no contact information or forms are provided, limiting user engagement and compliance. The domain registration is recent but consistent with the business launch timeline, registered with a reputable registrar and hosting provider. Overall, the website is functional but basic, with significant room for improvement in security, compliance, and content depth.

S

SHEAN s.r.o.

omnix.cz

58

Omnix.cz is a Czech-based technology company operated by SHEAN s.r.o., providing an integrated CMS and e-commerce platform tailored for businesses seeking unified web content management and online sales solutions. The platform emphasizes system integrations, multilingual content, configurators, and automation to serve a diverse client base with over 170 e-shop solutions and 200 web presentations. Technically, the website employs modern web technologies including HTTPS, Google Tag Manager, and reCAPTCHA, ensuring a secure and user-friendly experience. However, the absence of WHOIS data and explicit security policies slightly diminishes trustworthiness. Overall, the site is professional, well-structured, and compliant with GDPR, though improvements in security transparency and WHOIS data availability are recommended.

PT. Surgika Alkesindo is a well-established Indonesian company specializing in the distribution of high-quality local and international medical devices. Founded in 1996 and headquartered in Jakarta, the company operates with over 600 employees and multiple branch offices nationwide. Their website reflects a professional presence with detailed information about their business sectors, including surgery, ICU equipment, orthopedic devices, and more. The company targets hospitals, clinics, and healthcare providers across Indonesia, positioning itself as a leading medical device distributor with a strong market presence and multiple awards. Technically, the website uses modern web technologies such as Bootstrap and Revolution Slider, providing a good user experience with mobile optimization and clear navigation. However, there is room for improvement in accessibility and SEO optimization. Security-wise, the domain is stable and not privacy protected, but lacks DNSSEC and security headers, which are recommended to enhance protection. The absence of privacy and cookie policies indicates compliance gaps that should be addressed. Overall, the website is trustworthy and professional but could benefit from enhanced security and privacy compliance measures.

W

Woodfiber ApS

woodfiber.dk

54

Woodfiber ApS is a Danish company specializing in the manufacture and distribution of sustainable wood fiber-based insulation and building materials. The company targets environmentally conscious builders, homeowners, and construction professionals within Denmark. Their product portfolio includes various wood fiber insulation products, facade systems, vapor barriers, and sound insulation materials, positioning them as a niche player in the sustainable construction materials market. The website reflects a focused business model with clear product offerings and contact information, supporting their market presence since 2013. Technically, the website is built with standard modern web technologies including HTML5, CSS3, and JavaScript, with external resources such as Google Fonts and YouTube no-cookie embeds. The site is mobile optimized and has good SEO fundamentals, though no CMS or advanced frameworks are detected. Hosting and domain registration are managed by GIGAHOST ApS, consistent with the Danish business location. Performance is moderate with room for improvement in accessibility and security headers. From a security perspective, the website uses HTTPS but lacks visible security headers and DNSSEC is not enabled, which are areas for enhancement. No forms or data collection mechanisms are present, reducing immediate data exposure risks. However, the absence of a privacy policy and cookie consent mechanism indicates non-compliance with GDPR requirements. No incident response or vulnerability disclosure information is provided, limiting transparency in security management. Overall, the website is professional and trustworthy with a moderate security posture. Strategic improvements in privacy compliance, security headers, and DNSSEC implementation would strengthen their security and regulatory standing. The business appears legitimate and stable with consistent WHOIS data and clear contact details.

Meta Hospital is a Swiss-based startup specializing in Virtual Reality training solutions for healthcare professionals in the D-A-CH region. The company offers immersive, evidence-based VR educational content designed to enhance practical skills and professional competencies. Their platform supports certification and collaboration with healthcare institutions and industry partners, positioning them as an innovative player in healthcare education. Technically, the website uses modern web technologies including Laravel Livewire and integrates Google Analytics for user insights. The site is well-designed, mobile-optimized, and content-rich, reflecting a high level of digital maturity. Security posture is good with HTTPS and CSRF protections, but lacks some security headers and formal policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the business appears legitimate and trustworthy with transparent WHOIS data and clear contact information.

L

Line of Flight

country.is

61

Country.is is a technology-focused website offering a free IP-to-country geolocation API service. The service is designed primarily for developers and businesses requiring geolocation data based on IP addresses. It operates an open instance without requiring API keys and supports self-hosting via Docker, leveraging MaxMind and Cloudflare data sources. The website is positioned as a niche provider with a decade-long operational history and an open-source approach, fostering trust through transparency and community engagement on GitHub. Technically, the website employs modern web technologies including HTML5, CSS, JavaScript, FontAwesome, and Highlight.js. It uses Cloudflare for caching and performance optimization and supports Docker-based deployment for scalability. The site is mobile-optimized with good SEO practices, though accessibility features are basic. Performance is fast, and the technical infrastructure is sound for the service offered. From a security perspective, the site enforces HTTPS and implements rate limiting to prevent abuse. It does not log requests on its servers, enhancing user privacy. However, explicit security headers are not detected, and no formal privacy or cookie policies are published. Incident response and vulnerability disclosure mechanisms are absent, which could be improved to enhance trust and compliance. No vulnerabilities or exposed sensitive data were found in the analysis. Overall, the website presents a low-risk profile with a solid technical foundation and a clear business purpose. Strategic improvements in privacy compliance, security headers, and contact transparency would elevate its trustworthiness and compliance posture.

M

Mishcon de Reya LLP

mishcon.com

78

Mishcon de Reya LLP is a well-established international law firm founded in 1973, headquartered in London with offices in Singapore and Hong Kong. The firm offers a broad range of legal services including corporate law, dispute resolution, employment, real estate, and innovative legal technology solutions through its MDR Group. The website reflects a mature, professional business with a strong market position and a large workforce of over 1400 people. Technically, the site is built on ASP.NET Web Forms with modern web standards, providing good mobile optimization, accessibility, and SEO. Security posture is strong with HTTPS, security headers, and secure forms, although explicit security policies and incident response contacts are not publicly detailed. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. Overall, the site is trustworthy and professionally maintained, though WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency.

The domain vego.sk is currently a parked domain hosted by Websupport, a Slovak-based domain registration and hosting provider. The website content is minimal, serving as a placeholder with multilingual messages indicating no active content is present. The business behind the domain is not explicitly identified on the page, but the hosting provider Websupport is a reputable regional player offering domain and hosting services. The site is mobile responsive and uses modern web standards but lacks substantive content or business information. Security posture is moderate with DNSSEC enabled and HTTPS implied, but no explicit security headers or privacy policies are present. Overall, the domain appears legitimate but inactive, with room for improvement in privacy compliance and security best practices.

The website at elephantbet.ao currently serves as a default placeholder page provided by HostGator, indicating that the domain is registered and hosted but no active business website is deployed. The page content is minimal, focused on guiding users to HostGator login and support resources, with no company-specific information or services presented. The technical infrastructure is basic, relying on Bootstrap 4.5.2 and standard HTML/CSS/JS, hosted by HostGator. There is no evidence of advanced CMS or custom development. Security posture is weak due to lack of visible HTTPS confirmation, absence of security headers, and no privacy or cookie policies. No forms or data collection mechanisms are present, reducing immediate data protection concerns but also indicating no active user engagement. Overall, the site is not operational as a business website and lacks trust and credibility indicators.

The website at efortuna.pl is currently serving a geoblock notification page related to FORTUNA GAME a.s., a company likely operating in the gaming or betting sector. The domain is mature, registered since 2007, and shows no signs of privacy protection or suspicious registration patterns, indicating a legitimate business presence. However, the website content is minimal, lacking essential pages such as privacy policy, cookie policy, terms of service, or contact information, which limits user engagement and trust. From a technical perspective, the site uses basic HTML and CSS with embedded base64 images but lacks modern frameworks, SEO optimization, or accessibility features. No analytics, advertising, or tracking scripts were detected, suggesting limited digital marketing or user tracking. Security headers and advanced security configurations are absent, and SSL/TLS configuration details are unknown, indicating potential areas for improvement. The security posture is weak due to missing security headers, lack of privacy and cookie policies, and absence of incident response contacts. No WAF or blocking mechanisms were detected, and the site is accessible without challenge. Overall, the site scores low on content quality, technical implementation, security posture, and privacy compliance, reflecting a need for significant enhancements to meet modern standards and regulatory requirements. Strategic recommendations include implementing comprehensive privacy and cookie policies with consent mechanisms, enhancing security headers and SSL configurations, adding clear contact and incident response information, improving content quality and SEO, and adopting modern web technologies to improve performance and user experience.

S

Smarty CZ a.s.

iwant.cz

71

iWant.cz is a Czech Republic-based retail company specializing in Apple products and authorized Apple services. As an Apple Premium Partner, it operates both online and through 11 physical stores across the country, targeting Apple users including students and businesses. The website offers a comprehensive product catalog, trade-in services, warranty extensions, and specialized student programs, positioning itself as a trusted and professional Apple reseller and service provider in the Czech market. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript libraries like Tiny Slider and Auto-complete, and integrates analytics and marketing tools such as Google Tag Manager, Google Analytics, and Sklik retargeting. The site is hosted behind Cloudflare, ensuring good performance and security. It is mobile-optimized with excellent design quality and clear navigation, providing a positive user experience. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms aligned with GDPR. However, it lacks publicly available formal security policies and incident response contacts. No vulnerabilities or exposed sensitive data were detected in the content. WHOIS data is not publicly available, likely due to privacy protection, which is common for commercial domains and does not detract from the site's legitimacy. Overall, iWant.cz demonstrates a strong business presence with professional digital infrastructure and good privacy compliance. Strategic improvements include publishing formal security policies, incident response information, and enhancing HTTP security headers to further strengthen trust and security posture.

E

Eucerin

eucerin.es

63

Eucerin España is a dermatological skincare brand operating under the parent company Beiersdorf AG, targeting consumers in Spain with specialized skin care products. The website is professionally designed with a focus on dermatological care, providing relevant content for its target audience. Technically, the site uses modern tracking technologies such as Google Analytics and Google Tag Manager and appears to be built on the Sitecore CMS platform, hosted on Beiersdorf's infrastructure. However, the site lacks visible privacy and cookie policies in the provided content, which impacts privacy compliance scores. Security posture is moderate due to the absence of explicit security headers and policies in the HTML content. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

E

easybet.co.za - Only Available in South Africa

easybet.co.za

60

Easybet.co.za is an online gambling platform focused exclusively on the South African market, as indicated by the website title and WHOIS data. The website content is minimal, serving primarily as a placeholder page stating that services are only available in South Africa. There is no visible privacy policy, cookie policy, terms of service, or contact information, which limits user trust and compliance with privacy regulations. Technically, the site is hosted on AWS infrastructure with domain registration dating back to 2016, indicating a stable presence. However, the lack of security headers, privacy compliance, and modern web technologies suggests a low digital maturity level. Security posture is basic with no advanced protections or incident response information provided. Overall, the site presents a low-risk profile but requires significant improvements in transparency, compliance, and user engagement to enhance trust and professionalism.

The website batery-bets.in is currently inaccessible beyond a Cloudflare Turnstile security challenge page, which blocks direct content access. No business information, contact details, or policies are visible. The site appears to be small or newly registered with privacy-protected WHOIS data, limiting trust and legitimacy assessment. The technical infrastructure relies on Cloudflare for security and hosting, but no further technology or CMS details are available. The security posture cannot be fully evaluated due to lack of accessible content and headers. Overall, the site presents a low trust profile with minimal transparency and no visible compliance or security policies.

Sportium operates as a major player in the sports betting and online casino industry, targeting Spanish-speaking customers with a broad offering of betting options and live events. The website emphasizes its official sponsorships with prominent sports entities such as Manchester City and the Kings League, positioning itself as a reputable and established brand in the gambling sector. The business model combines both physical points of sale and online platforms to reach a wide audience. Technically, the website is built using standard web technologies including HTML5, CSS3, and jQuery, with a focus on responsive design and user experience. However, the technical infrastructure lacks advanced security headers and cookie consent mechanisms, which are important for compliance and user trust. The site uses AJAX for form submission and integrates external services for geolocation and token generation. From a security perspective, the site uses HTTPS but does not exhibit strong security header implementations or explicit incident response contacts. The absence of WHOIS data reduces transparency and trustworthiness, although the website content and branding suggest legitimacy. No critical vulnerabilities or malware indicators were found, but improvements in security best practices and privacy compliance are recommended. Overall, the website presents a moderate risk profile with good business credibility but technical and compliance gaps that should be addressed to enhance security posture and user trust.

R

RTVS

artena.sk

54

Arténa is a Slovak audiovisual workshop operated by RTVS, focusing on film, documentary, animation, sound production, journalism, and cultural heritage digitization. The website presents three regional centers in Bratislava, Banská Bystrica, and Košice, each specializing in different media production aspects. The site is professionally designed with clear navigation and relevant content targeting creative professionals and media producers in Slovakia. Technically, the site uses standard HTML5 and CSS3 with Google Fonts, but lacks advanced frameworks or CMS. Security posture is moderate with DNSSEC enabled and domain status good, but missing critical security headers and privacy policies. No forms or contact emails are provided, limiting user engagement and compliance transparency. Overall, the site is legitimate and consistent with its stated business purpose but would benefit from enhanced security and privacy compliance measures.

Slovenská televízia a rozhlas (STVR) operates as Slovakia's national public broadcaster, offering a comprehensive range of television and radio services including live streaming, program archives, news, and podcasts. The website serves as a central hub for accessing these services and provides additional features such as an e-shop and cultural project information. The organization maintains a strong market position as a trusted media entity in Slovakia, targeting a general audience with diverse content offerings. Technically, the site employs modern web technologies including HTTPS, JavaScript frameworks, and cookie consent management, ensuring a secure and user-friendly experience across devices. Security posture is robust with proper SSL configuration and security headers, though explicit security policies and incident response contacts are not publicly detailed. Overall, the website demonstrates high professionalism, good content quality, and compliance with privacy regulations, making it a reliable digital presence for the broadcaster.

A

ATEX - spol. s r. o.

atexsport.de

50

ATEX - spol. s r. o. is a specialized manufacturer and retailer of high-quality sportswear, serving professional and recreational athletes primarily in Central Europe. With over 30 years of experience, the company produces custom-designed sports clothing including jerseys, vests, pants, and hats, mainly manufactured in the Czech Republic. The business maintains a strong market position through partnerships with elite sports teams and federations, and operates an e-commerce platform alongside physical sales points. Technically, the website employs modern web technologies and integrates multiple marketing and analytics tools, ensuring a responsive and user-friendly experience. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though there is room for improvement in security headers and formal policies. Overall, the site reflects a credible, professional small business with a clear focus on quality and customer engagement.